Privacy Policy

1. Who controls your data

The controller of your personal data is Konecta Czech a.s., company ID 26418037, registered at V Olšinách 2300/75, 100 00 Prague 10 – Strašnice, Czech Republic ("Woxa" or "we"). Woxa is part of the Konecta group.

For any data protection matter, contact us at info@woxa.app.

2. What data we process and why

On woxa.app we process personal data in three situations:

• Demo request form: your e-mail and company name, used to handle your request and arrange a product demo. Legal basis: steps taken prior to entering into a contract (Art. 6(1)(b) GDPR).
• Analytics tools and cookies: data about your device, browser and behaviour on the site (Google Analytics, Microsoft Clarity, Google Tag Manager), used to improve the website. Legal basis: your consent given in the cookie banner (Art. 6(1)(a) GDPR); you can withdraw it at any time.
• Error monitoring: technical data about website errors (Sentry) to keep the site reliable. It only runs with your consent given in the cookie banner; form contents are not captured.

3. Cookies

Necessary cookies (security, language and theme preference) are always on. Analytics cookies and error monitoring only run with the consent you give in the cookie banner on your first visit.

You can change your choice at any time: clear the stored site data for woxa.app in your browser settings (the "woxa-consent-v1" entry) and the cookie banner will appear again on your next visit.

4. Who we share data with

The website runs in the EU (Google Cloud, Frankfurt region). These processors help us operate it:

• Google Ireland Ltd. (Google Analytics, Google Tag Manager, cloud infrastructure)
• Microsoft Ireland Operations Ltd. (Microsoft Clarity)
• Functional Software, Inc. (Sentry, error monitoring)

5. Transfers outside the EU

Some of these processors may process part of the data outside the European Economic Area (mainly in the USA). Such transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision (EU-U.S. Data Privacy Framework).

6. How long we keep data

Demo request data is kept while we handle your request and the follow-up business communication, for no longer than 24 months after the last contact unless a contract is concluded.

Analytics data is kept for the period configured in each tool, no longer than 26 months. Technical error records are kept for no longer than 90 days.

7. Your rights

Under the GDPR you have the right to:

• access your personal data,
• have inaccurate data corrected,
• erasure ("right to be forgotten"),
• restriction of processing,
• data portability,
• object to processing,
• withdraw your consent at any time,
• lodge a complaint with a supervisory authority (in the Czech Republic: uoou.gov.cz).

8. Data inside the training platform

This policy covers the public website woxa.app. Data inside the training platform (operator accounts, recordings and transcripts of practice conversations, evaluation results) is processed on behalf of our clients under a data processing agreement; the controller of that data is always the client the operator works for.

The platform's application, database and storage run in the EU (Google Cloud, Frankfurt). Voice conversations and AI evaluation are provided by sub-processors ElevenLabs and OpenAI, which may process data outside the EU; their involvement is governed by the data processing agreement with the client.

9. Changes to this policy

We may update this policy from time to time, for example when we introduce new tools. The current version is always available on this page; the effective date is shown below.